C_HRHFC_2311 試験問題を無料オンラインアクセス

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

• A.The number of logs generated by denied traffic is reduced.
• B.A session for denied traffic is created.
• C.Device detection on all interfaces is enforced for 30 minutes.
• D.Denied users are blocked for 30 minutes.

To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

• A.Downstream FortiGate
• B.FortiManager
• C.Root FortiGate
• D.FortiAnalyzer

Refer to the exhibit.
Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

• A.Social networking web filter category is configured with the action set to authenticate.
• B.The name of the firewall policy is all_users_web.
• C.Access to the social networking web filter category was explicitly blocked to all users.
• D.The action on firewall policy ID 1 is set to warning.

An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

• A.Add the support of NTLM authentication.
• B.Add user accounts to the FortiGate group fitter.
• C.Add user accounts to the Ignore User List.
• D.Add user accounts to Active Directory (AD).

Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

• A.The host field in the HTTP header
• B.The serial number in the server certificate
• C.The subject alternative name (SAN) field in the server certificate
• D.The subject field in the server certificate
• E.The server name indication (SNI) extension in the client hello message